Datadome Protection
Datadome offers is a bot protection solution, providing real-time detection and mitigation of malicious bots, safeguarding websites and APIs from fraud, scraping, and other automated threats.
Delinea Platform Audit Logs
Delinea Platform is a secure session-broker solution that lets organizations grant, monitor and audit elevated RDP, SSH and SFTP connections to critical systems.
Detecteam
Detecteam is a cybersecurity company that provides an automated platform for detection engineering and attack simulation.
DNS playbooks
DNS is a module for DNS-related automations and lookups.
EfficientIP SOLIDserver DDI
EfficientIP SOLIDserver suite of appliances is designed to deliver highly scalable, secure and robust virtual and hardware appliances for critical IPAM-DNS-DHCP-NTP-TFTP services.
Ekinops OneOS
Ekinops OneOS is a comprehensive and flexible network operating system designed to meet the evolving needs of modern telecommunications networks.
Elastic Auditbeat Linux
Auditbeat communicates directly with the Linux audit framework, collects the same data as auditd, then the data can be stored in JSON inside a log file before being sent to a log concentrator.
Elasticsearch playbooks
Elasticsearch is a scalable, real-time search and analytics engine designed for handling large volumes of structured and unstructured data.
Elastic Winlogbeat
Winlogbeat is an open-source log collector that ships Windows Event Logs as JSON events to a Losgtash log concentrator before being sent to Sekoia.io.
ESET Protect - Asset connector (Devices)
ESET Protect is a cybersecurity platform offering advanced threat detection, endpoint protection, and management tools for businesses, ensuring robust defense against malware and cyber threats.
Eset Protect / Inspect
ESET Protect and ESET Inspect are two parts of the same security ecosystem, often compared to the brain and the magnifying glass of your network security.
Eset Protect playbooks
ESET is a global cybersecurity company known for its antivirus and security software solutions for both businesses and consumers.
ExtraHop Reveal(x) 360
ExtraHop Reveal(x) 360 is a cloud-based network detection and response platform offering protection and detections for on-premises and cloud environments.
F5 BIG-IP
F5's BIG-IP is a family of products covering software and hardware designed around application availability, access control, and security solutions.
F5 Distributed Cloud
F5 Distributed Cloud is a cloud-native platform that provides integrated solutions for application delivery, security, and multi-cloud networking.
F5 NGINX
NGINX is an HTTP and reverse proxy server, a mail proxy server, and a generic TCP/UDP proxy server.
Fastly Next-Gen WAF Alerts
Fastly Next-Gen WAF is a web application firewall solution designed to protect online assets by mitigating web application threats.
Fastly Next-Gen WAF Audit Logs
Fastly WAF audit logs tracks activities related to your corp and your sites like user creation, rule creation, site configuration changes.
Flare.io - Events
Flare is a Threat Exposure Management platform that proactively monitors the clear and dark web to detect leaked credentials, high-risk data exposures, and brand threats. It empowers security teams with real-time, actionable intelligence to remediate vulnerabilities and prevent cyberattacks before they are exploited.
Forcepoint Management Server
The Management Server is the central component for system administration.
Forcepoint Next-Generation Firewall
Forcepoint Next-Generation Firewall provide advanced threat protection and network security, utilizing a blend of cloud and on-premises security solutions.
Forcepoint Secure Web Gateway
Forcepoint Secure Web Gateway (SWG) is a proxy, installed on the endpoint, applying routing policies and analyzing the traffic against threats.
Fortinet FortiGate
The range of Fortigate firewalls is a complete appliance solution whose security functions are highly developed.
Fortinet FortiGate playbooks
Fortigate is a firewall appliance from Fortinet with anti-spam and anti-virus features.
Fortinet FortiMail
Fortinet cybersecurity solutions sell physical products such as firewalls, plus software and services such as anti-virus protection, intrusion prevention systems, and endpoint security components.
Fortinet FortiProxy
FortiProxy is a web proxy that protects clients against internet threats. In this documentation, we will explain one way to collect and send FortiProxy logs to Sekoia.io.
Fortinet FortiSOAR
To install the FortiSOAR integration, you first have to create an API Key in Sekoia.io XDR with specific permissions.
Fortinet FortiWeb
This documentation details one way to collect and send FortiWeb logs to Sekoia.io: from the FortiWeb machine to an internal syslog concentrator, then forwarded to Sekoia.io.
Fortinet Lacework FortiCNAPP
The Lacework Cloud Security provides continuous cloud security monitoring and automated threat detection, safeguarding cloud environments with real-time insights and compliance enforcement.
FreeRADIUS
FreeRADIUS is an implementation of RADIUS, a protocol for remote user Authentication, Authorization, and Accounting.